$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/8a54b627-2c39-30cd-8dd5-7e9e39625e33.roa File: 8a54b627-2c39-30cd-8dd5-7e9e39625e33.roa (raw, json) Hash identifier: gsorqxf0wEoi4BvtzhuLIE17zWeU11FRe9LMQMPCOqU= Subject key identifier: 29:E9:19:24:B8:5A:89:43:06:44:66:FB:26:1D:BB:35:E5:0E:66:D5 Certificate issuer: /CN=98fa46f5-eef1-4569-9795-c233e7e74658 Certificate serial: 010D0C9F4328584B76F229BA042D0BE12A6B1D80 Authority key identifier: EC:E4:93:A8:0B:A6:92:FC:4D:01:36:6C:DB:03:4B:A3:00:90:84:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/8a54b627-2c39-30cd-8dd5-7e9e39625e33.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 55244 IP address blocks: 2602:802:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/98fa46f5-eef1-4569-9795-c233e7e74658.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/98fa46f5-eef1-4569-9795-c233e7e74658.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:29:ba:04:2d:0b:e1:2a:6b:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98fa46f5-eef1-4569-9795-c233e7e74658 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=1614a485-d27d-4891-8bd3-4188352e491d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5b:92:cc:23:35:7e:d3:59:e6:33:88:17:1f: f3:8e:d4:04:3c:72:9c:0e:5f:9e:6b:e4:92:bd:ca: 4d:51:68:4b:1d:de:9a:01:ad:3d:3e:bf:e8:d0:7d: de:af:db:cb:cf:54:b1:2d:80:38:ff:70:a6:a0:45: 65:9e:2c:4d:b5:0e:b2:05:bb:46:b1:29:13:03:e5: 8d:06:5c:fa:86:3e:51:9e:ae:00:88:db:81:bf:ec: 9e:1f:10:81:32:be:08:63:5d:df:7e:a4:f3:52:fa: 2f:98:b1:19:c7:3a:eb:c2:d2:c4:af:55:97:7b:c5: 99:0b:ec:74:c5:4f:6a:12:d7:f5:65:d3:9f:89:08: f3:22:1c:91:14:b5:29:c2:a7:13:ac:b9:13:e0:9f: bd:93:cf:39:7a:0d:e7:00:ec:84:5a:40:00:11:a5: f0:1b:9d:62:53:ad:13:0d:ab:42:21:c9:f4:19:0a: 1e:a7:2f:e4:1a:ef:6f:df:4d:09:bb:4f:0b:e7:e1: d4:a0:2a:e3:29:44:cd:94:ab:fd:c6:95:c8:3d:52: 7d:9b:0b:15:b7:7a:3b:5c:52:ef:13:fd:e9:05:86: 8c:c9:1e:69:ec:ad:2b:07:51:3b:27:bd:81:a9:c4: 7f:dd:4d:ef:8d:97:61:ad:87:b3:5e:dd:32:b2:1a: b2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:E9:19:24:B8:5A:89:43:06:44:66:FB:26:1D:BB:35:E5:0E:66:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/8a54b627-2c39-30cd-8dd5-7e9e39625e33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/98fa46f5-eef1-4569-9795-c233e7e74658.crl X509v3 Authority Key Identifier: keyid:EC:E4:93:A8:0B:A6:92:FC:4D:01:36:6C:DB:03:4B:A3:00:90:84:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658.cer sbgp-ipAddrBlock: critical IPv6: 2602:802:2000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:6a:3c:c5:08:89:a4:a0:98:04:d0:95:0e:56:08:2f:11:d7: 13:fd:de:aa:ba:32:fd:78:34:f9:12:79:23:57:b7:7b:e1:67: b4:94:62:d6:ea:15:2d:b4:3a:99:59:f2:c1:ea:89:a0:54:14: 29:e4:d6:23:f9:08:31:c9:8e:67:84:df:be:34:df:54:c1:d9: fd:11:80:88:88:16:d6:6b:fa:db:ff:bf:dd:56:76:64:e3:72: c7:f2:66:6f:45:10:8b:f7:d3:db:f4:7e:7e:00:7c:33:2b:8e: 6d:8d:5c:66:bc:87:04:f2:5c:e5:10:86:34:b6:ca:db:24:f7: 6a:0f:2b:a8:e2:b5:73:7a:d4:bd:5f:07:1a:0c:44:53:3f:2c: 78:3c:da:9b:63:3c:32:e5:a2:2b:7d:3c:15:ad:61:51:6d:78: 19:ae:bd:55:24:7a:34:8e:7a:86:c2:a9:5a:0d:57:52:57:80: 8c:26:6c:66:e9:73:a2:87:bd:c1:77:49:2a:1e:40:83:bc:6d: 4a:26:e8:f5:af:c8:ce:41:26:76:24:42:b8:f6:47:d9:e7:d2: 28:75:3d:4f:d5:27:09:bf:d5:30:a1:69:0c:62:46:e2:84:dc: b9:8c:35:8a:2a:87:f9:98:90:60:84:d1:21:2f:98:6e:d3:80: 9d:ba:58:f4 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEt28im6BC0L4SprHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOThmYTQ2ZjUtZWVmMS00NTY5LTk3OTUtYzIzM2U3ZTc0 NjU4MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MTYxNGE0ODUtZDI3ZC00ODkxLThiZDMtNDE4ODM1MmU0OTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVuSzCM1ftNZ5jOIFx/zjtQEPHKcDl+ea+SS vcpNUWhLHd6aAa09Pr/o0H3er9vLz1SxLYA4/3CmoEVlnixNtQ6yBbtGsSkTA+WN Blz6hj5Rnq4AiNuBv+yeHxCBMr4IY13ffqTzUvovmLEZxzrrwtLEr1WXe8WZC+x0 xU9qEtf1ZdOfiQjzIhyRFLUpwqcTrLkT4J+9k885eg3nAOyEWkAAEaXwG51iU60T DatCIcn0GQoepy/kGu9v300Ju08L5+HUoCrjKUTNlKv9xpXIPVJ9mwsVt3o7XFLv E/3pBYaMyR5p7K0rB1E7J72BqcR/3U3vjZdhrYezXt0yshqyywIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCnpGSS4WolDBkRm+yYduzXlDmbVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85OGZh NDZmNS1lZWYxLTQ1NjktOTc5NS1jMjMzZTdlNzQ2NTgvOGE1NGI2MjctMmMzOS0z MGNkLThkZDUtN2U5ZTM5NjI1ZTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOThmYTQ2ZjUtZWVmMS00NTY5LTk3 OTUtYzIzM2U3ZTc0NjU4Lzk4ZmE0NmY1LWVlZjEtNDU2OS05Nzk1LWMyMzNlN2U3 NDY1OC5jcmwwHwYDVR0jBBgwFoAU7OSTqAumkvxNATZs2wNLowCQhHwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85OGZhNDZmNS1lZWYxLTQ1NjktOTc5NS1jMjMz ZTdlNzQ2NTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgIIAiAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAbGo8xQiJpKCYBNCVDlYILxHXE/3eqroy/Xg0+RJ5I1e3e+FntJRi 1uoVLbQ6mVnyweqJoFQUKeTWI/kIMcmOZ4TfvjTfVMHZ/RGAiIgW1mv62/+/3VZ2 ZONyx/Jmb0UQi/fT2/R+fgB8MyuObY1cZryHBPJc5RCGNLbK2yT3ag8rqOK1c3rU vV8HGgxEUz8seDzam2M8MuWiK308Fa1hUW14Ga69VSR6NI56hsKpWg1XUleAjCZs Zulzooe9wXdJKh5Ag7xtSibo9a/IzkEmdiRCuPZH2efSKHU9T9UnCb/VMKFpDGJG 4oTcuYw1iiqH+ZiQYITRIS+YbtOAnbpY9A== -----END CERTIFICATE-----Generated at Tue Oct 21 14:19:04 2025 by rpki-client